charging stations

Schneider’s EVLink car charging stations were easily hackable, thanks to a hardcoded password

Posted by | automotive, broadband, charging stations, electric car, electric vehicles, energy, Gadgets, inductive charging, internet connectivity, New York, Security, transport | No Comments

Schneider has fixed three vulnerabilities in one of its popular electric car charging stations, which security researchers said could have easily allowed an attacker to remotely take over the unit.

At its worst, an attacker can force a plugged-in vehicle to stop charging, rendering it useless in a “denial-of-service state,” an attack favored by some threat actors as it’s an effective way of forcing something to stop working.

The bugs were fixed with a software update that rolled out on September 2, shortly after the bugs were first disclosed, and limited details of the bugs were revealed in a supporting document on December 20. A fuller picture of the vulnerabilities, found by New York-based security firm Positive Technologies, were released today — almost a month later.

Schneider’s EVLink charging stations come in all shapes and sizes — some for the garage wall and some at gas stations. It’s the charging stations at offices, hotels, shopping malls and parking garages that are vulnerable, said Positive.

At the center of Positive’s disclosure is Schneider’s EVLink Parking electric charging stations, one of several charging products that Schneider sells, and primarily marketed to apartment complexes, private parking area, offices and municipalities. These charging stations are, like others, designed for all-electric and plug-in hybrid electric vehicles — including Teslas, which have their own proprietary connector.

Because the EVLink Parking station can be connected to Schneider’s cloud with internet connectivity, either over a cell or a broadband connection, Positive said that the web-based user interface on the charging unit can be remotely accessed by anyone and easily send commands to the charging station — even while it’s in use.

“A hacker can stop the charging process, switch the device to the reservation mode, which would render it inaccessible to any customer until reservation mode is turned off, and even unlock the cable during the charging by manipulating the socket locking hatch, meaning attackers could walk away with the cable,” said Positive.

“For electric car drivers, this means not being able to use their vehicles since they cannot be charged,” it said. The company also said that it’s also possible to charge a car for free by exploiting these vulnerabilities.

Positive didn’t say what the since-removed password was. We asked for it — out of sheer curiosity more than anything — but the company isn’t releasing the password to prevent anyone exploiting the bug in unpatched systems.

The researchers, Vladimir Kononovich and Vyacheslav Moskvin, also found two other bugs that gives an attacker full access over a device — a code injection flaw and a SQL injection vulnerability. Both were fixed in the same software update.

When reached, a Schneider spokesperson did not immediately have comment. If that changes, we’ll update.

Additional reporting: Kirsten Korosec.

Updated at 12:15pm ET: with additional details, including about the unreleased password.

Powered by WPeMatico

GM is smartening up its Bolt EV smartphone app

Posted by | Android, Apple, automotive, cars, ChargePoint, charging stations, chevrolet bolt, electric vehicle, electric vehicles, energy, evgo, General-Motors, Greenlots, inductive charging, michigan, smartphone, transport, Transportation | No Comments

GM is sprucing up its smartphone app for owners of the all-electric Chevrolet Bolt through a collaboration with charging network companies EVgo, ChargePoint and Greenlots.

The idea is to take aggregate dynamic data from each of the EV charging networks so owners can have a “more seamless charging experience.” In short: GM wants to make it easier and more intuitive for Bolt EV owners to find and access charging. Removing hurdles from the charging experience can go a long way in convincing more people to buy the Bolt EV, or any EV for that matter.

The partnership with EVgo, ChargePoint and Greenlots is a notable start considering that collectively that means more than 31,000 charging ports.

“GM believes in an all-electric future, and this is a significant step to make charging easier for our customers,” said Doug Parks, General Motors vice president of Autonomous and Electric Vehicle Programs. “By collaborating with these three companies, we expect to reduce barriers to create a stronger EV infrastructure for the future. This is an important step toward achieving GM’s vision of a world with zero emissions.”

GM plans to take the aggregate charging data from EVgo, ChargePoint and Greenlots and use it to improve the myChevrolet app. For instance, owners will be able to see if a charging station is available and compatible with the Bolt EV. It also will provide real-time data on charge stations to report if a charging station is working.

GM plans to create an app interface that will streamline the enrollment process for each of these networks. The automaker wants owners to be able to activate a charging session using the app instead of a membership card, but didn’t say when that feature would be rolled out.

GM recently made a few updates to the myChevrolet app that lets owners project the energy assist to the vehicle’s infotainment system via Apple CarPlay and Android Auto for drivers with model year 2017 or newer Bolt EVs.

This means Bolt EV drivers can access information through their infotainment system, like vehicle range, charging station locations and search, as well as route planning that takes into consideration charging stops along the way if the destination is out of range.

Original purchasers of new Bolt EVs will have access to these features at no additional cost for five years from the vehicle delivery date, according to GM.

GM doesn’t provide updates about the Bolt EV, and more broadly its electric vehicle program, at the same pace and frequency as say Tesla. But the company is still ramping up and expanding. GM recently expanded a battery lab, and a new LG Electronics plant in Michigan has come online.

The LG Electronics facility in Hazel Park started making battery packs this fall to supply GM’s Orion Assembly Plant, where the automaker builds the all-electric Chevrolet  Bolt.

GM’s plan to launch 20 new all-electric vehicles globally by 2023 and increase production of the Chevy Bolt.

Powered by WPeMatico

Tesla files patent for mobile battery swapping rig

Posted by | business, charging stations, Elon Musk, Gadgets, Tesla, Tesla Model S, transport | No Comments

 Tesla is still exploring options to make swapping vehicle battery packs easier and faster. This patent filed in May reveals one option that would allow technicians to change out packs in less than 15 minutes. This isn’t the first of such ideas. Back in 2014 Tesla briefly played with an automated system that swapped Model S battery packs in less than 90 seconds. That idea seemed to be… Read More

Powered by WPeMatico